CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000079

Linux foundation ONOS 1.9.0 is vulnerable to a DoS...

CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

PT-2017-10787

Name of the Vulnerable Software and Affected Versions Linux foundation ONOS version 1.9.0 Description The issue allows unauthenticated use of websockets. Recommendations For Linux foundation ONOS version 1.9.0, consider disabling the use of websockets until a patch is available...

PT-2017-10788

Name of the Vulnerable Software and Affected Versions Linux foundation ONOS version 1.9.0 Description The issue allows for unauthenticated upload of applications .oar, resulting in remote code execution. Recommendations For Linux foundation ONOS version 1.9.0, consider restricting access to the...

PT-2017-10786

Name of the Vulnerable Software and Affected Versions Linux foundation ONOS version 1.9.0 Description The issue is related to a Denial of Service DoS problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue w...

Microsoft Brings Ubuntu, Suse, and Fedora Linux to Windows Store

Microsoft has been expressing its love for Linux and Open Source for almost three years now, and this love is embracing as time passes. Just last year, Microsoft made headlines by building support for the Bash shell and Ubuntu Linux binaries into Windows 10, allowing users to run limited instance...

OpenSSL Update Fixes High Severity DoS Vulnerability

The OpenSSL Software Foundation released an update to the OpenSSL crypto library that patches a vulnerability rated high severity that could allow a remote attacker to cause a denial-of-service condition. OpenSSL released the version 1.1.0e update that fixes flaws found in OpenSSL 1.1.0, accordin...

Citrix XenServer Linux Foundation xapi Security Bypass Vulnerability (CNVD-2017-01230)

Citrix XenServer is a virtualization solution. A security vulnerability exists in Citrix XenServer Linux Foundation xapi, which allows remote attackers to exploit the vulnerability to submit a special request to cancel an administrator job...

Citrix XenServer Linux Foundation xapi Security Bypass Vulnerability

Citrix XenServer is a virtualization solution. A security vulnerability in Citrix XenServer Linux Foundation xapi allows remote attackers to exploit the vulnerability to submit a special request and corrupt the host database...

Design/Logic Flaw

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators...

Design/Logic Flaw

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database...

CVE-2017-5573

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators...

CVE-2017-5572

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database...

CVE-2017-5572

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database...

CVE-2017-5572

CVE-2017-5572 affects Citrix XenServer (Linux Foundation xapi) up to version 7.0. An authenticated read-only administrator can corrupt the host database, as described in multiple sources. CVSS data from NVD indicates network-based access with low complexity and partial integrity/availability impa...

CVE-2017-5573: Undefined Security Weakness

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators...

Microsoft Joins The Linux Foundation — Turns Love Affair Into a Relationship

You won't believe your eyes while reading this, but this is true. Microsoft just joined the Linux Foundation as a high-paying Platinum member. Microsoft's love with open source community is embracing as time passes. At its first Connect event in 2013, the company launched Visual Studio 2013. A ye...

Third-party service side of the drain: Let's Encrypt leaked 7 6 1 8 name User email address-bug warning-the black bar safety net

! Let's Encrypt translated into Chinese called“let's encrypt”, in fact, this is one for the majority of the site free-issued SSL/TLS certificates of the project. Let's Encrypt the backing is not small, at the moment it is by the Linux Foundation managed to initiate the project of organizations...

Linux Foundation Badge Program Boost Open Source Security

The Linux Foundation says a new Core Infrastructure Initiative CII Best Practices Badge program launched Tuesday will help companies interested in adopting open source technologies evaluate projects based on security, quality and stability. The CII Best Practices Badge does not issue certificates...